Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/nu1XPfdA9-AfjPJMk0UwNO92YWQ.roa
File: nu1XPfdA9-AfjPJMk0UwNO92YWQ.roa (raw, json)
Hash identifier: 5FZtX99ItZ7iQ/nDUiNZe7apOYZRn6MLVxLVPfdEivc=
Subject key identifier: 9E:ED:57:3D:F7:40:F7:E0:1F:8C:F2:4C:93:45:30:34:EF:76:61:64
Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Certificate serial: 02
Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/nu1XPfdA9-AfjPJMk0UwNO92YWQ.roa
Signing time: Wed 28 Jun 2023 01:09:46 +0000
ROA not before: Wed 28 Jun 2023 01:09:46 +0000
ROA not after: Sat 15 Jun 2024 06:45:48 +0000
asID: 131965
IP address blocks: 157.112.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 06:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Validity
Not Before: Jun 28 01:09:46 2023 GMT
Not After : Jun 15 06:45:48 2024 GMT
Subject: CN=9EED573DF740F7E01F8CF24C93453034EF766164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:73:11:3d:dd:59:50:ea:1b:1c:f5:c8:4a:
65:b7:4b:34:32:20:92:e8:b2:3a:9a:4a:ca:ca:2d:
1a:ad:77:aa:91:44:b5:ae:1b:93:05:7a:9d:37:34:
8a:74:f6:e2:02:33:84:79:a1:a4:fa:3f:2c:39:84:
5f:d5:5a:f6:38:56:74:60:09:c5:66:dc:4f:86:42:
78:85:f7:8e:dc:65:ac:d1:e6:76:b2:ad:f8:f3:df:
74:5d:22:d7:26:d7:5e:50:16:2d:22:ee:e5:3b:0a:
55:9a:2b:f1:ed:d5:c7:dc:81:d4:23:36:ed:ab:7f:
2c:1c:ff:fc:3e:ab:10:92:f5:1d:f2:79:42:08:cf:
c9:cb:dd:22:81:b1:23:cd:17:4b:35:de:60:12:67:
3d:e1:7a:df:ec:a5:b0:6a:2a:fb:61:6d:77:a6:5c:
af:0e:7a:6f:c2:37:48:55:9a:8c:83:1c:73:b9:94:
93:d6:09:92:7f:32:97:df:b6:b6:7a:13:62:36:81:
20:51:b7:48:20:b3:6b:8c:16:7f:d5:33:38:60:c3:
2b:54:42:13:e7:aa:19:c2:35:17:74:20:49:4a:fd:
95:52:cf:f0:13:3e:53:74:a1:7e:a2:15:4d:ea:43:
63:c3:21:db:a9:c9:51:dd:b3:2e:27:dd:6f:be:68:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:57:3D:F7:40:F7:E0:1F:8C:F2:4C:93:45:30:34:EF:76:61:64
X509v3 Authority Key Identifier:
keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/nu1XPfdA9-AfjPJMk0UwNO92YWQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
27:7f:e1:d7:92:5d:8f:bd:c4:b4:f9:af:aa:9a:2f:7e:2a:24:
36:2f:b8:73:ae:6d:ab:32:41:4d:25:57:b5:6f:31:a0:e4:64:
cd:e5:f8:eb:3e:d0:ca:30:93:74:8a:c6:e7:26:b2:4b:96:14:
15:f7:53:18:c2:c3:14:d5:7d:16:52:33:83:24:67:a7:53:15:
f4:3d:f5:9a:02:91:00:2a:ca:68:78:0c:e0:bb:9c:19:68:4b:
d0:14:0c:66:a8:97:a1:c6:e6:eb:c2:84:15:6d:43:9f:cf:13:
46:87:d3:2a:a0:fe:03:ef:9a:e1:d5:84:bf:35:8b:6d:69:29:
c6:3f:77:28:51:31:04:33:b7:00:a1:22:ce:c2:8d:d9:74:be:
cc:22:13:de:8f:7f:4d:01:4e:84:9f:73:ed:31:ae:a6:bf:e5:
a2:67:21:01:1a:7f:ca:1d:39:97:d4:40:20:96:63:cd:d9:a2:
2c:ac:00:b8:e3:90:59:fa:32:f6:0a:ea:e1:42:99:17:55:f5:
31:c4:e5:fd:3d:cd:a7:29:b8:ab:5d:a0:9d:bf:23:41:61:b4:
bf:e9:6d:5a:ed:f2:81:ac:a5:5d:36:db:52:0d:72:54:5c:96:
08:4b:aa:a8:00:c8:47:22:85:1a:13:c5:39:9e:6e:a5:ba:a6:
bc:bc:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org